start-hyperswapp-airdrop[.]pages[.]dev

This domain is flagged as a crypto drainer under active investigation. Registered on April 30, 2026, through Cloudflare, Inc., it resolves to IP 172.66.46.245 and uses SSL certificates from Google Trust Services alongside HSTS, Cloudflare, and HTTP/3 technologies. The page title claims to offer a Hyperswap Airdrop related to DeFi rewards, which is a known lure for cryptocurrency theft. The domain appears on one security blocklist and is blocked by PhishDestroy, with a Gridinsoft trust score of 0/100, indicating high suspicion. VirusTotal scanned the domain with 95 vendors but currently flags none, though absence of detections does not confirm safety. The phishing kit identified is an Airdrop Scam, consistent with crypto drainer tactics that aim to trick users into connecting wallets or signing malicious transactions. Infrastructure analysis shows the domain remains active as of July 12, 2026, and defenders should treat it as a probable threat, avoid interaction, and report any associated wallet addresses or transaction hashes to relevant security platforms. The exact visual content of the site has not been analysed, but the combination of a recent registration, low trust score, blocklist presence, and airdrop-themed title strongly suggests malicious intent targeting cryptocurrency users.